SSL check results of webserver.dictfarm.nl

NEW You can also bulk check multiple servers.

Discover if the mail servers for webserver.dictfarm.nl can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Mon, 26 May 2025 00:32:16 +0000

The mailservers of webserver.dictfarm.nl can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @webserver.dictfarm.nl addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
webserver.dictfarm.nl
2a01:7c8:d000:7f:5054:ff:fea3:c740
10
supported
dictfarm.nl
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
webserver.dictfarm.nl
136.144.204.63
10
supported
dictfarm.nl
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Outgoing Mails

We have not received any emails from a @webserver.dictfarm.nl address so far. Test mail delivery

Certificates

First seen at:

CN=dictfarm.nl

Certificate chain
  • dictfarm.nl
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption

      • R11
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption

          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption

Subject
Common Name (CN)
  • dictfarm.nl
Alternative Names
  • dictfarm.nl
  • mail.dictfarm.nl
  • webserver.dictfarm.nl
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R11
validity period
Not valid before
2025-05-20
Not valid after
2025-08-18
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
BF:5E:0A:D0:CC:72:8C:12:8A:BC:C2:08:9C:98:B9:2C:D9:EC:C9:73:68:A0:1A:A7:FA:98:2D:04:A7:20:74:FA
SHA1
2E:49:32:0F:DD:2C:4B:32:D4:5C:18:F6:3E:21:81:FA:B0:DA:18:CF
X509v3 extensions
subjectKeyIdentifier
  • 79:3A:F7:D9:1F:AD:9C:7E:1C:64:96:DD:E8:A2:4D:2A:48:C2:5D:21
authorityKeyIdentifier
  • keyid:C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
authorityInfoAccess
  • CA Issuers - URI:http://r11.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://r11.c.lencr.org/75.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : A4:42:C5:06:49:60:61:54:8F:0F:D4:EA:9C:FB:7A:2D:
  • 26:45:4D:87:A9:7F:2F:DF:45:59:F6:27:4F:3A:84:54
  • Timestamp : May 20 12:01:08.487 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:90:4E:02:D8:73:03:20:DB:B0:52:AE:
  • 6A:28:96:54:3C:63:AA:E5:5E:BE:A9:C5:01:5A:9E:6C:
  • B9:E7:DE:F8:F9:02:20:07:18:88:69:4B:92:E8:DD:CA:
  • D8:58:88:E3:FE:01:80:48:0C:CC:3C:B5:3F:07:D3:03:
  • 17:80:4B:F8:A6:AF:3E
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
  • 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
  • Timestamp : May 20 12:01:08.556 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:E9:98:B2:EB:57:4C:48:C7:B6:B3:95:
  • 4E:DA:AE:35:03:44:C5:39:93:70:CC:84:EA:14:C4:CE:
  • F3:08:09:36:20:02:21:00:A4:96:A1:FF:80:24:D4:61:
  • 09:73:92:33:2F:70:27:F0:93:EC:79:18:E8:5F:CE:08:
  • CF:BB:85:E1:6A:4A:44:6D